# Automatic full disk encryption for Oracle Cloud

The supported-image table below is for one path: assisted setup on fresh,
unencrypted Oracle Cloud images. It is not the full Panocrypt-managed unlock
compatibility boundary.

If a Linux system already uses LUKS, or you set up LUKS yourself on another
provider or distro, you can usually bind an unused keyslot to Panocrypt with
your distro's `cryptsetup`, Clevis, and the standard Clevis `tang` pin. No
Panocrypt host software is required for that path. Start with
[Bind an existing LUKS volume](https://docs.panocrypt.com/setup/existing-luks-volume/) or
[Bind an existing encrypted root disk](https://docs.panocrypt.com/setup/existing-luks-root-disk/).

Use this page when you want the Panocrypt setup helper to run from
cloud-init/user-data, set up LUKS on the root disk, bind managed boot unlock,
and verify encrypted boot.

## Supported Oracle Cloud images

| Distribution | Versions |
|---|---|
| Ubuntu | 22.04, 24.04 |

## Related guides

| Goal | Guide |
|---|---|
| Understand the two Panocrypt paths | [What runs on your server](https://docs.panocrypt.com/concepts/managed-unlock-vs-setup/) |
| Understand assisted setup | [Assisted fresh-server setup](https://docs.panocrypt.com/setup/supported-disk-encryption/) |
| Preserve recovery material | [Assisted setup recovery material](https://docs.panocrypt.com/setup/recovery-material/) |
| Compare provider setup paths | [Assisted setup providers](https://docs.panocrypt.com/providers/) |
| Learn how LUKS keyslots make removal simple | [LUKS keyslots](https://docs.panocrypt.com/concepts/luks-keyslots/) |